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iAPX 43204 iAPX 43205 
FAULT TOLERANT 
BUS INTERFACE AND MEMORY CONTROL UNITS 



Software Transparent Detection And 
Recovery From Any Single Point Failure 

Supports Up To 31 Processors For A 
Large Performance Range 

Configure From 1 To 8 Buses For High 
Bandwidtli And Fault Tolerance 



Single, Dual, and Quad Redundant 
Configurations Tailor System Designs 
to Meet A Sf^ectrum of Fault Tolerance 
And Cost Objectives 

VLSI System Simplifies Design With 
Low TTL Count 

Dynamic RAM Refresh with Error 
Correction and Scrubbing 



The 43204 Bus Interface Unit (BlU) and 43205 Memory Control Unit (MCU) are two VLSI devices that support 
the construction of fault tolerant, multiple processor 432 systems. Together they support: multiprocessor ar- 
bitration, dynamic RAM control, and EGG with a minimal amount of TTL. Fault tolerant systems can be built 
that tolerate the failure of any single component or bus. The BlU and MCU detect the failure and automatically 
switch to a redundant processor, bus, or memory. Hardware failures are completely masked from application 
software. 
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Figure 1. A 2 Bus System with 2 General Data Processors and 1 1/O Subsystem. 



Intel Corporation assumes no responsibility for use of any circuitry other than circuitry embodied in an Intel product. No other circuit patent 

licenses are implied. 

© INTEL CORPORATION. 1983 

MARCH 1983 
ORDER NUMBER: 210963-001 



intel^ iAPX 43204, 43205 [Pl^iLDlMlOmi^V 



INTRODUCTION 

The first phase of the iAPX 432 program introduced 
two processor types: the General Data Processor 
(GDP) and the interface Processor (IP). The GDP 
was implemented with two VLSI components: iAPX 
43201 and iAPX 43202. The IP was implemented as 
a single VLSI component: the iAPX 43203. These 
three VLSI components implement the processor 
architecture ior the iAPX 432. System builders have 
constructed multiple processor systems by sur- 
rounding the VLSI processors with discrete logic, 
which provided the interface to shared memory and 
the interprocessor communication paths. The meth- 
od for interconnecting iAPX 432 processors and 
memories was unique for each system, since no 
standard had been defined. 

This data sheet describes a pair of VLSI compo- 
nents: the iAPX 43204 Bus Interface Unit (BID) and 
the iAPX 43205 Memory Control Unit (MCU) that 
form a unifying interconnect arctiitecture for build- 
ing IAPX 432 systems. Together, these components 
form the basis for constructing multiple-processor 
fault-tolerant iAPX 432 systems. 

The IAPX 432 together with the BlU/MCU intercon- 
nect architecture provide: 

• Integrated fault tolerance. The VLSI interconnect 
components (BlU/MCU) integrate all the detec- 
tion and recovery logic required to build a system 
that can tolerate any single component failure. 

• Software transparent fault tolerance. Hardware 
performs all fault detection and recovery func- 
tions transparent to application software. The ar- 
chitecture never dies. 

• Configurability. The BlU and MCU support a 
range of fault tolerance and performance options 
to meet a diverse set of cost, performance, and 

reliability needs. 

• Standard VLSI solution. Very little external logic is 
required. 



• Reliable software. The iAPX 432 system's "need 
to i<now" (capability) addressing confines errors, 
protecting the system from errant software. 

The object-based architecture of the iAPX 432 pro- 
vides a robust and flexible environment for cooper- 
ating, concurrent software systems. The iAPX 432 
processors use a cooperating, self-dispatching 
mechanism to automatically share the workload be- 
tween the available processors. The number of pro- 
cessors available in the system is transparent to 
software. 

The BlU and the MCU extend the logical flexibility 
and robustness of the IAPX 432 processors into the 
physical implementation of IAPX 432 systems. The 
BlU and MCU allow the IAPX 432 hardware to modu- 
larly and transparently extend the processing power 
(from 1 to 63 modules of processors or memories), 
bus bandwidth (1 to 8 backplane buses), and fault- 
tolerant capabilities of the system. Figure 1 shows 
an example of a two bus three processor (2 GDPs -I- 
1 IP) system. 

As Figure 2 shows, an iAPX 432 system based on 
the interconnect architecture may be expanded 
gracefully. A system with one processor and one 
memory may be built with a single memory bus. 
Transparent multiprocessing may be achieved by 
simply adding processor modules. When additional 
memory is required, memory modules may be add- 
ed onto the single memory bus. When more memory 
bandwidth is required, an additional memory bus- 
(es) can be added. None of these alternative sys- 
tems require any change to application software. 

In an iAPX 432 system, each processor is unaware 
of the manner in which the memory address space is 
actually implemented. Hardware located in the BlUs 
determines how processor addresses are mapped 
to buses and memory systems. 
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Figure 2. Modular Expansion 



BUS INTERFACE UNIT 

The Bus Interface Unit or BlU provides the switching 
function of the IAPX 432 interconnect system. That 
is, it accepts access requests from an iAPX 432 pro- 
cessor and, based on the physical address, it de- 
cides which memory bus(es) will be used to perform 
the access. The BlU is also responsible for arbitrat- 
ing the usage of the memory bus. Finally, the BlU is 
responsible for propagating error information 
throughout the sytem. 



MEMORY CONTROL UNIT 

The Memory Control Unit or MCU interfaces mem- 
ory storage arrays to the memory bus. The storage 
arrays will typically be constructed with high-density 



dynamic RAM (DRAM) components. All types of 
DRAMs are supported: 16K, 64K, 256K, even par- 
tially good components. The MCU manages the 
storage array as a logical collection of 32 data bits, 7 
bits of error correcting code (ECC), and an optional 
spare bit. The MCU can automatically refresh the 
dynamic storage array. In addition, the MCU can 
scrub single-bit errors from the storage array as a 
background task. Scrubbing is accomplished by pe- 
riodically reading the storage array, correcting all 
single-bit errors, and detecting and reporting all 
double-bit errors. The MCU accepts variable length 
data requests from the memory bus and performs 
the necessary access sequencing to read or write 
the data into the storage array. A modest amount of 
external logic is required to interface the MCU to the 
storage array RAMs — for simple configurations, as 
few as 12 external TTL packages are required. 
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MEMORY BUS 

The memory bus (sometimes referred to as the 
MACD bus) provides the principal communication 
path, carrying all memory access requests and in- 
terprocessor communication. The memory bus con- 
nects BlUs to MCUs. Each node in the interconnect 
system tracks each operation on the memory bus to 
which it is attached. Thus, unlike most bus proto- 
cols, each BlU and MCU keeps track of all outstand- 
ing requests on the bus — not just the ones made by 
the BlU or MCU itself. Control for the bus in fully dis- 
tributed; there is no centralized bus controller. 



INTEGRATED FAULT TOLERANCE 

BlUs and MCUs also form the basis for building 
fault-tolerant \APX 432 systems. Functional Redun- 



dancy Checking (PRC) provides the low-level hard- 
ware support on which hardware fault-toierant 
modules are constructed. In Figure 3, notice that a 
redundant processor module is formed by replica- 
tion of the VLSI GDP and BlUs. A redundant mem- 
ory module is formed by duplicating the VLSI MCU. 
The unshaded GDPs, BlUs, and MCUs act as mas- 
ters. The shaded components act as checkers, 
which observe their master and report any disagree- 
ment they detect in the values the master produced. 

When any error occurs, a special error reporting 
network notifies all nodes in the system of the dis- 
crepancy. Figure 4 illustrates the flow of error infor- 
mation in the interconnect system. In phase 1, an 
error is detected at a node in the interconnect sys- 
tem. The example illustrates an error detected at 
BIU(2,1); i.e., the BlU on memory bus 2 in processor 
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Figure 3. FRO Configuration Pairing 
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Figure 4. Three Phase Error Reporting IVIechanIsm 



module 1 . The detecting component reports the er- 
ror to all components attached to the same bus (a 
bold line indicates an active error reporting path). At 
this point, if all error reporting nodes are intact, all 
nodes have received the error message. In phase 2, 
all components that received the phase 1 error mes- 
sage rebroadcast the message along their module 
paths. Finally, in phase 3, each component that has 
received an error message rebroadcasts the mes- 
sage along its bus path. This second rebroadcast 
ensures that all nodes receive the error message 
even if a single module or bus error report line has 
failed. At the end of phase 3, all interconnect compo- 
nents in the system have been informed of the error. 
The actual error reporting paths are separate from, 
but run parallel to, the MACD and AGO busses so 
that error reports may propagate even if a bus is in- 
operative. In addition, the reporting paths may be 
duplicated to remove any single-point dependency 
in delivering an error report. 

RECOVERY 

The recovery process begins after an error report 
message has been broadcast around the system. 



Recovery is a distributed operation — each node in 
the system reads the error report message and de- 
cides what recovery actions need to be taken. 

For recovery to be successful, there must be redun- 
dant resources available in the system. There are 
three redundancy mechanisms in the BlU and MCU: 
bus retry buffers, ECC, and module shadowing. The 
first two are useful in recovering from transient er- 
rors, while module shadowing allows recovery from 
permanent errors. 

Figure 5 illustrates how every module in the system 
may be paired with another self-checking module of 
the same type. This pair of self-checking modules 
operates in lock step and provides a complete and 
current backup for all state information in the mod- 
ule. This mechanism is known as module shadow- 
ing because a shadow is ready to fill in if the primary 
fails, or vice versa. Fault detection and recovery is 
performed totally transparent to both application 
and system software. When the recovery is com- 
plete, system software is notified that a failure oc- 
curred. Figure 6 shows sample module failures and 
automatic hardware recovery. 
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Figure 5. QMR Configuration Pairing 
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Figure 6A. Module Failures Are Detected 
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Figure 6B. Failed Modules Are Disabled 
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Figure 7. Bus Reconfiguration 



A fault-tolerant module Is also called a QMR module 
(Quad Modular Redundant) because most compo- 
nents (except memory) are replicated four times. 
There are two self-checking modules and each of 
these has a master and a checker. 



Each memory bus in the system may be paired with 
another memory bus. l\/lemory modules are physi- 



cally connected to both buses although logically 
they are attached to only one bus at a time. During 
normal operation the buses run independently. Both 
contribute to the total memory bandwidth available 
in the system. If a bus fails, the memory modules at- 
tached to that bus will automatically switch to the 
other bus which is still operating. Figure 7 illustrates 
how the BlU and IVICU reconfigure the system when 
a bus fails. 
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CONFIGURABLE FAULT TOLERANCE 

Figure 8 illustrates the range of alternatives avail- 
able to system designers when they build iAPX 432 
systems. The most fault-tolerant systems are built 
from a QMR configuration of processors that can 
tolerate any single component failure without crash- 
ing the system. BlUs and MCUs provide full hard- 
ware error detection and recovery transparent to 
software. 

The lowest cost configurations can be built using 
basic processor modules without FRC or QMR. This 
type of configuration will crash if a component fails, 
but can be made "self-healing" by adding intelligent 
software to the I/O subsystem. Unlike QMR, self- 
healing does not protect against system crashes, 
but it does allow the system to recover from a failure 
in a short period of time. The "healing" takes place 
in 3 steps. First, a watchdog timer in an I/O subsys- 
tem alerts I/O subsystem software that the central 
system has failed. Second, the I/O subsystem 
checks BlU/MCU error logging registers and runs 
diagnostics to identify which resource (e.g., proces- 
sor, bus or memory) has failed. Third, the I/O sub- 
system reinitializes the system using the 
configuration control within the BID and MCU to 
configure out the failed resource. The system is up 
and running without human intervention after only a 
short period of down time. 

The basic configuration is the lowest cost alterna- 
tive, but for some applications it is desirable to have 



a very high degree of confidence that calculations 
are performed correctly. A QMR system will do this 
since all components have a checker that alerts the 
system whenever a mistake is made. However, a 
QMR configuration may be overkill for some appli- 
cations that can tolerate an occasional system fail- 
ure, as long as the computations are correct when 
they do complete. FRC configurations offer an alter- 
native in between the basic and QMR approaches. 
Adding a second set of checker components to each 
module improves the error detection capabilities of 
the system providing "high confidence" computing. 
No single hardware failure will go undetected and 
corrupt the results of a critical computation. FRC in- 
sures that any error is caught before it can propa- 
gate to another module in the system. FRC alone 
does not provide automatic hardware recovery like 
a QMR system, but it does detect errors as soon as 
they occur so that the system does not become cor- 
rupted. It is then the responsibility of system soft- 
ware to implement a "self-healing" strategy where 
the faulty resource is disabled and the system reini- 
tialized. 

The software configurability of a BlU/MCU system 
allows a system to use a combination of the above 
strategies. For example, software can configure a 
system as a full QMR system in the morning for criti- 
cal applications, and then switch to an FRC only sys- 
tem in the afternoon. This doubles the system 
throughput (twice as many processors are working 
in parallel) without making any hardware changes. 
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Figure 8. Fault-Tolerant Alternatives 
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FAULT-TOLERANT SYSTEM DESIGN 
RESPONSierLiTiES 

The interconnect architecture and the VLSI compo- 
nents provide a stable base for developing fault- 
tolerant iAPX 432 systems. The IAPX 432 intercon- 
nect components address the Issues concerning 
fault tolerance which are encountered when con- 
structing the IAPX 432 central system. A number of 
system-wide issues remain the responsibility of the 
iAPX 432 system designer. These issues include: 

• A fault-tolerant I/O system 

• Fault-tolerant power supplies and distribution 
method 

• A fault-tolerant method for clock generation and 

distribution 

• The electrical and physical provisions for on-line 
repair 



SUMMARY 

The iAPX 432 interconnect architecture provides a 
standard VLSI method for constructing multiple pro- 
cessor VLSI computer systems. The iAPX 432 inter- 
connect architecture is implemented by a pair of 
VLSI components, the Bus Interface Unit (BlU) and 
the Memory Control Unit (MCU). Together with iAPX 
432 processors, these components permit the con- 
struction of modular, extensible, multiprocessor 
computer systems. The components are designed 
to support the construction of fully fault-tolerant 
IAPX 432 systems. However, there is no penalty in 
performance or in cost for those applications that do 
not require fault tolerance. 

The 432 fault-tolerant mechanisms are designed to 
provide a flexible and complete solution to the prob- 
lems of fault-tolerant hardware. For basic systems 
(those without checkers for error detection or OMR 
for recovery), a user may decide to use only a few 
detection mechanisms and provide recovery only 
for transient errors. This functionality comes at no 
additional cost in the VLSI interconnect system. To 
reduce maintenance cost and increase system 
availability, a system may use all of the detection 
mechanisms (i.e. may add checker components) but 
may not add any extra recovery capability (i.e. may 
not marry self-checking modules into a fault-tolerant 
QMR module). Continuous operation is available to 
the user who adds the extra recovery capabilities. 

None of the fault-tolerant mechanisms reduce sys- 
tem performance. Systems that do not require the 
highest level of fault tolerance are not penalized in 
any way (cost, size, or performance) for the unused 
fault-tolerant capabilities. Increased levels of fault 
tolerance are achieved by replicating the IAPX 432 
VLSI components. The hardware fault tolerance in 
the IAPX 432 is transparent to application software. 
The system's fault-tolerant capabilities may be 
changed without any changes to the application 
software system. 
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Figure 10. iAPX 43204 BlU Logic Symbol 
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Table 1 . iAPX 43204 BlU Pin Description 



Symbol 


Type 


Name and Function 


IVIemory Bus Group 


MACD15 
. . MACDO 


I/O* 


These 1 6 bidirectional signals carry physical memory addresses, control in- 
formation (access length and type), and data to and from the memory bus. 


CHK1..CHK0 


I/O* 


These 2 bidirectional signals carry parity bit check information which de- 
tects errors in transfers on MACD15 . . MACDO and CTL2 . . CTLO. The 2 
parity check bits are computed to satisfy the following equations (X = Ex- 
clusive OR): 

MACD15 X MACD13 X MAGD1 1 X MACD9 X MACD7 
X MACD5 X MACD3 X MACD1 X CTL1 X CHK1 = 0 

MACD1 4 X MACD1 2 X MACD1 0 X MACD8 X MACD6 

X MACD4 X MAGD2 X MACDO X CTL2 X CTLO X CHKO = 1 

The BlU and MCU generate and check even parity (an even number of ones) 
across the 10 odd-numbered MACD, CTL, and CHK signals, and odd parity 
(an odd number of ones) across the 1 1 even-numbered MACD, CTL, and 
CHK signals. 


CTL2..CTL0 


I/O* 


The 3 MACD bus control signals carry a code that controls the sequencing 
of the memory bus. 


MBOUT 


I/O** 


MBOUT controls the direction of external buffers for the MACD, CHK, and 
CTL signals. When MBOUT is asserted, it indicates that the buffers must be 
directed to carry information outbound from the component to the memory 
bus. 


BERLOUT 


0 


BERLOUT supplies bit-serial bus error messages when the component de- 
tects a memory bus error, a storage array error, or a memory module error. 


BERL1, 
BERL2, 


1 
1 


BERL1 and BERL2 are duplicate paths on which the component receives 
bit-serial bus error messages from the memory bus. When duplicated paths 
are not required, these two pins must be supplied with the same bus error 
report information. 


BCHK 


I/O* 


BCHK provides a mechanism which checks that external buffers are operat- 
ing. BCHK is toggled once each clock cycle by the component that is driving 
it. In an PRC pair, the master component drives BCHK. The checker compo- 
nent in the PRC pair receives BCHK. Routing BCHK from the master com- 
ponent, through one buffer in each external buffer package, and to the 
checker component, forms a serial network. If the oscillating BCHK signal 
fails to traverse the external buffer network, the buffer path is suspect and a 
bus error will be signalled. Buffer checking can be disabled by interconnect 
register programming. 
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Table 1 . iAPX 43204 BlU Pin Description (Continued) 



Symbol 


Type 


Name and Function 


iVIemory Bus Arbitration Group 


CONT 


1 


The CONT input indicates if the external arbitration network has detected 
that two or more simultaneous requests have been made for the use of the 
memory bus. When contention is indicated, ail contending components will 
perform a binary arbitration sequence (based on each component's unique 
6-bit module ID) to decide which component will be granted first use of the 
memory bus. 


RQ 


1 


The RQ input indicates if any agent is requesting the use of the memory bus. 
There are three valid combinations for RQ and CONT: 

RQ CONT interpretation 

1 1 No request 

0 1 One BlU is making a request 

0 0 Two or more BlUs are making a request 

The MCU does not generate any memory bus requests. The MCU tracks the 
action of RQ and CONT, and the CTL(2 . . 0) signals to determine when it is 
allowable to use the memory bus to reply to a request. 




I/O** 
l/U 


vvncM asserreu, ri\.jv.yu i siyridis trial ine coiTiponeni icquiic^o ine Uo6 oj tiie 
memory bus. RQOUT is intended to drive an external open-collector invert- 
er which is wire-ORed to form a combined RQ line. The RQOUT signal from 
all BlUs attached to a memory bus must be logically combined to form a con- 
tention signal. (Contention occurs when two or more BlUs issue RQOUT si- 
multaneously). The logic to detect contention among BlUs must be supplied 
by the customer. 


NREQOUT 


I/O* 


The NREQOUT signal indicates that the component has received a new re- 
quest from its associated processor. NREQOUT is intended to drive an ex- 
ternal open-collector inverter, which is wire-ORed (with the same signal 
from other BlUs on the memory bus) to form NREQ. 


NREQ 


1 


NREQ is an input that signals the beginning of a new time-ordered request 
cycle in which a request from one or more processors must be managed. 
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Table 1 . iAPX 43204 BlU Pin Description (Continued) 



Symbol 


Type 


Name and Function 


Module Group 


MERL 


1 


The MERL input accepts bit-serial module error messages. See the 
BERLOUT pin description for the format of the serial error messages. 


MERLOUT 


0 


The MERLOUT output broadcasts bit-serial module error messages to all 
BlUs contained within the same module (attached to the same processor). 


MMAL 


1/0+ 


MMAL operates in the same manner as MMAH except that when MMAL is 
asserted it indicates that the lower addressed portion of a multiple module 
access is in progress on the memory bus. 

The two BiUs that are cooperating in a multiple module access observe both 
MMAH and MMAL. Both signals are deasserted after each BlU has com- 
pleted its portion of the access on the memory bus to which it is connected. 
In read accesses, after both signals are deasserted, the BlU with the lower 
addressed portion of the access presents data to the processor first. The 
BlU with the higher addressed portion of the access tracks the other BlU by 
counting the number of bytes returned to the processor (noting ICS, Inter- 

rnnnprt Status ^pp hplnw^ Whpn thp Bll J with thp Inwpr-aririrp'5<;pf1 nnrtinn 

II ICOL O LCILLIO, OCCLJC'll-/VVy. VVIICJIILIICLJII.^ VV ILII LIIC lUVVd ClUUI COO^^.i ^J\Jt LIL^I 1 

of the access completes its transfer, the next BlU begins automatically. Mul- 
tiple module read accesses which begin at an odd addressed byte boundary 
cause the two cooperating BlUs to simultaneously return data to the pro- 
cessor. At the address boundary for which they share access responsibility, 
the low BlU returns its last byte on ACD7 . . ACDO, and the high BlU returns 
its first byte on ACD15 . . ACD8. 

After MMAH and MMAL have been deasserted, one (or both) of the BlUs 
may reassert the signals, each to indicate that its portion of the multiple 
module access encountered an error. This indication will be returned to the 
processor during error significance time for ICS. 


MMAH 


1/0 + 


When asserted, MMAH indicates that one of the BlUs in a module Is per- 
forming the high order address part of a multiple module access. A multiple 
module access occurs when a processor request spans an address range 
such that two memory buses, each connected via a different BlU, much be 
engaged. When it is deasserted, MMAH indicates that the high portion of the 
access has been completed on the memory bus. 
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Table 1 . iAPX 43204 BlU Pin Description (Continued) 



Symbol 


Type 


Name and Function 


ACD Bus Group The ACD Bus Group contains the set of signals with which a compatible 
iAPX 432 processor connects to the BlU. See the iAPX 43201 /43202 Gener- 
al Data Processor Data Sheet (Order Number 590125) and the IAPX 43203 
Interface Processor Data Sheet (Order Number 590130) for information 
about compatible iAPX 432 processors. 


ACD15 
. . ACDO 


I/O 


These 16 signals form the processor-to-BIU communication path that car- 
ries all memory and interconnect accesses. 


PRO 


1 


PRO indicates the start of a processor request to the BlU. 


ICSOUT 


0 


ICSOUT is intended to drive an external open-collector inverter to form ICS. 
All BlUs in a processor module contribute to the wired-OR ICS signal. 


ICS 


1 


ICS supplies interconnect status to both the BlU and its associated iAPX 
432 processor. ICS carries information on errors, data synchronization, and 
interprocessor communication to the processor. It is also monitored by 
each BlU for coordinating multiple module accesses. 


CLRPUOUT 


0 


CLRPUOUT is intended to drive an open collector inverter and form a wired- 
OR CLR signal to the associated IAPX 432 processor. All BlUs in a proces- 
sor module contribute to the wired-OR CLR signal. Using CLRPUOUT, a 
BlU can synchronize the FRO master and checker processor components. 


System Group 


VCC2..VCC0 




Three VCC pins supply 5-yolt power to the BlU/MCU. All three pins must be 
connected. The three VCC pins are not connected together inside the 
component. 


VSS2..VSS0 




Three VSS pins provide ground to the BlU/MCU. All three pins must be 
connected. The three VSS pins are not connected together inside the 
component. 


CLKA 


1 


CLKA is a square-wave clock for the BlU/MCU. CLKA must operate con- 
tinuously to preserve the operating state of the component. 


CLKB 


1 


CLKB is a square-wave clock for the BlU/MCU. CLKB is the same frequen- 
cy as CLKA but lags CLKA by 90 degrees. CLKB must operate continuously 
to preserve the operating state of the component. 


INlT 


1 


INIT is a signal that causes the BlU/MCU to initialize. In addition, INIT is used 
to enable external logic which provides configuration information to the 
component. 



Legend: I = 

O = 
I/O = 



4- = 



Input signal 

Output signal 

Input/Output signal 

FRO errors cause module error 

FRO errors cause bus error 

External passive pullup required (10K Ohms) 

Asserted low 
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N.C. 


□ 


VSS 


□ 


MBOUT 




CTL2 


=1 


CTL1 




CLTO 


□ 


MACD15 




MACD14 


□ 


MAC013 


□ 


MACD12 




MACD11 


□ 


MACD10 


□ 


MACD9 


□ 


MACD8 


Zl 


MACD7 


=1 


MACD6 


=1 


MACD5 


4 



jyuuuuuuuuuuuuuuuuu 




innnnnnnnnnnnnnn 



NOTE: N.C. pads must not 
be connected. 



S33330 00lx|<zcDn)Di<t 
ononojgz oPigig 



PIN NO. 1 MARK 



LO-il 



Figure 11. 43205 Pin Configuration 











SLAD(19..0} 




Storage Memory 


MACD(15..0) 


RAS 




Array Bus 


CHK(1..0) 


ABCHK 




Group Group 


CTL(2..0) 


WE 






MBOUT 


OEIN 






BERLOUT 


REFRESH 






BERL1 








BERL2 






iAPX 43205 


— ^ BCHK 






MCU 


BCHKIN/M 








— ^ BUSSEL 


VCC(2..0) 




System Memory 


CONT 


VSS(2..0) 




Group Bus 


^ RQ 


CLKA 




Arbitration 




CLKB 




Group 




INIT 















Figure 12. iAPX 43205 IVICU Logic Symbol 
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Table 2. iAPX 43205 MCU Pin Description 



Symbol 


Type 


Name and Function 


iVIemory Bus Group 


MACD15 
. . MACDO 


I/O* 


These 16 bidirectional signals carry physical memory addresses, control In- 
formation (access length and type), and data to and from the memory bus. 


CHK1..CHK0 


I/O* 


These 2 bidirectional signals carry parity bit check information which de- 
tects errors in transfers on MACD15 . . MACDO and CTL2 . . CTLO. The 2 
parity check bits are computed to satisfy the following equations (X = Ex- 
clusive OR): 

MACD1 5 X M AGD1 3 X MACD1 1 X MACD9 X MACD7 
X MACD5 X MACD3 X MACD1 X CTL1 X CHK1 = 0 

M ACD1 4 X M ACD1 2 X M ACD1 0 X M ACD8 X MACD6 

X MACD4 X MACD2 X MACDO X CTL2 X CTLO X CHKO = 1 

The BlU and MCU generate and check even parity (an even number of ones) 
across the 1 0 odd-numbered MACD, CTL, and CHK signals, and odd parity 
(an odd number of ones) across the 1 1 even-numbered MACD, CTL, and 
CHK signals. 


CTL2..CTL0 


I/O* 


The 3 MACD bus control signals carry a code that controls the sequencing 

of the memory bus. 


MBOUT 


I/O** 


MBOUT controls the direction of external buffers for the MACD, CHK, and 
CTL signals. When MBOUT is asserted, it indicates that the buffers must be 
directed to carry information outbound from the component to the memory 
bus. 


BERLOUT 


0 


BERLOUT supplies bit-serial bus error messages when the component de- 
tects a memory bus error, a storage array error, or a memory module error. 


BERL1 
BERL2 


1 
I 


BERL1 and BERL2 are duplicate paths on which the component receives 
bit-serial bus error messages from the memory bus. When duplicated paths 
are not required, these two pins must be supplied with the same bus error 

icpvJiL lillUi lllCtLIUi 1. 


BCHK 


0* 


BCHK provides a mechanism which checks that external buffers are operat- 
ing. BCHK is toggled once each clock cycle by the component. By routing 
BCHK through one buffer in each external buffer package to BCHKIN/M, a 
serial network is formed. If the oscillating BCHK signal fails to traverse the 
external buffer network, BCHKIN/M will detect the error and signal a bus er- 
ror. The BCHK signal does not toggle when the component is being initia- 
lized by either the INIT signal or an internal initialization request. Buffer 
checking can be disabled by a parameter acquired by the MCU during initial- 
ization. The MCU will disable buffer checking after it detects a permanent 
module error. 


BCHKIN/M 


1 


BCHKIN/M checks the oscillating BCHK signal after it has been routed 
through each of the external buffers for the memory bus. If any errors are 
detected, a module error will be signalled. During initialization, the BCHKIN/ 
M pin accepts the MASTER information. If it is high during initialization, then 
the component will become the master of an FRC pair of components; 
otherwise it will become a checker. 
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Table 2. iAPX 43205 MCU Pin Description (Continued) 



Symbol 


Type 


Name and Function 


Memory Bus Group 


BUSSEL 


0 


BUSSEL controls which of two memory buses (normal or backup) the MCU 
is to use. The middle bit of an internal 3-bit normal bus identifier (ID) is logi- 
cally combined with an internal bus state code to produce BUSSEL. The bus 
state code records the state and health of both the normal and backup bus- 
es. When the component switches to an alternate bus (changes the bus 
state code), BUSSEL is changed accordingly. 


iVIemory Bus Arbitration Group 


CONT 


1 


The CONT input indicates if the external arbitration network has detected 
that two or more simultaneous requests have been made for the use of the 
memory bus. When contention Is indicated, ail contending components will 
perform a binary arbitration sequence (based on each component's unique 
6-bit module ID) to decide which component will be granted first use of the 
memory bus. 


RQ 


1 


The RQ input indicates if any agent is requesting the use of the memory bus. 
There are three valid combinations for RQ and CONT: 

RQ CONT Interpretation 

1 1 No request 

0 1 One BlU is making a request 

0 0 Two or more BlUs are making a request 

The MCU does not generate any memory bus requests. The MCU tracks the 
action of RQ and CONT, and the CTL(2 . . 0) signals to determine when it is 
allowable to use the memory bus to reply to a request. 


Storage Array Group 


SLAD19. . S- 
LADO 


I/O* 


The 20 SLAD signals form the communication path between the MCU and 
its associated storage array. The SLAD bus multiplexes addresses to the 
storage array with data (32 bits) and ECC (7 bits) which are to be read from 
or written to the array. 


RAS 


0* 


When RAS is asserted, it indicates the start of a storage array cycle. RAS 
may combine with external sequencing logic to control the operation of the 

storage array. 


ABCHK 


1 


ABCHK is an input used to verify operation of the external buffers associat- 
ed with the storage array. ABCIHK is analogous to the BCIHKIN input in the 
memory bus group. To check the control signals to the storage array, the 
signals WE and CAS (generated by the external array sequencing logic) are 
used to generate a signal that is routed serially through alt of the external 
buffers. To check the buffers to the storage array the oscillating BCHK sig- 
nal, buffer control signals, and an external decoder PROM can be used to 
produce the ABCHK signal. An alternative method of checking the storage 
array buffers is to use buffer packages with no more than four buffers so 
that the special ECC protection in the MCU may detect buffer failures. 


WE 


0* 


When WE is asserted, the MCU indicates that a write operation is to be per- 
formed in the storage array. 
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Table 2. iAPX 43205 MCU Pin Description (Continued) 



Symbol 


Type 


Name and Function 


Memory Bus Arbitration Group 


DEIN 


0* 


When DEIN is asserted, the MCU indicates that the SLAD19 . . Sl^DO sig- 
nals are ready to accept information from the storage array into the MCU. 


REFRESH 


0* 


When REFRESH is asserted the MCU indicates that the storage array cycle 
is a refresh cycle. In systems with multiple banit dynamic RAM storage ar- 
rays, the REFRESH signal may be used to command the storage array 
sequencing logic to perform an appropriate cycle (e.g., RAS-only refresh for 
all banks). In a storage array with a single bank of dynamic RAMs the 
REFRESH signal need not be used. 


System Group 


VCC2..VCC0 




Three VCC pins supply 5-volt power to the BlU/MCU. All three pins must be 
connected. The three VCC pins are not connected together inside the 
component. 


VSS2..VSS0 




Three VSS pins provide ground to the BlU/MCU. All three pins must be 
connected. The three VSS pins are not connected together inside the 
component. 


CLKA 


1 


CLKA is a square-wave clock for the BlU/MCU. CLKA must operate con- 
tinuously to preserve the operating state of the component. 


CLKB 


1 


CLKB is a square-wave clock for the BlU/MCU. CLKB is the same frequen- 
cy as CLKA but lags CLKA by 90 degrees. CLKB must operate continuously 
to preserve the operating state of the component. 


INTT 


1 


INIT is a signal that causes the BlU/MCU to initialize, in addition, INIT is used 
to enable external logic which provides configuration information to the 
component. 



Legend: i = Input signal 

O = Output signal 

I/O = Input/Output signal 

= FRC errors cause module error 

** = FRC errors cause bus error 

= Asserted low 
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ABSOLUTE MAXIMUM RATINGS* 

Ambient Temperature Range 0°C to 70*'C 

Storage Temperature -65°Cto +150''C 

Voltage on Any Pin witli 

Respect to Ground -1 .OV to +7V 

Power Dissipation 2.2 Watt 



*NOTICE: Stresses above those listed under "Abso- 
lute Maximum Ratings ' ' may cause permanent dam- 
age to ttie device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the oper- 
ational sections of this specification is not implied. 
Exposure to absolute maximum rating conditions 
for extended periods may affect device reliability. 



iAPX 43204 DC Characteristics 



Symbol 


Description 


Min 


Max 


Units 


Vile 


Clock input low voltage 


-0.5 


+0.8 


V. 


Vilic 


Clock input high voltage 


3.2 


Vee+0.5 


V. 


Vil 


Input low voltage 


-0.5 


+0.8 


V. 


Vili 


Input high voltage 


2.0 


VCC+0.5 


V. 


Vol 


Output low voltage 




0.45 


V. 


Voh 


Output high voltage 


2.4 


VCC 


V. 


III 


Input leakage current (measured at Vin=VCC) 




±10 


fiA. 


No 


Output leakage current (measured at 0.45 V. < Vout 

< VCC) 




±10 


fiA. 


loh 


Output high current (measured at 2.6 V.) 


> -2 




mA. 


lol 


Output low current (measured at 0.45 V.) 


4 




mA. 


Ice 


Power supply current (sum of VCCO, VCC1 , VCC2) 




400 


mA. 



All DC parameters are guaranteed over the following conditions: 

VSS2..VSS0 = 0 Volts 
VCC2..VCC0 = 5.0 Volts ±10% 

The absolute value of the differential DC voltage between any of the VCC pins (VCC2..VCC0) must be less than 0.1 
Volts. This is normally guaranteed by connecting the three VCC pins to the same printed circuit power trace. 
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iAPX 43204 AC Characteristics 

Ambient temperatrue range of 0*0 to 70''C 



f^vmhnl 




8 MHz 


Unit 


Min 


Max 


tr, tf 


Ciocl< rise and fall times 


0 


10 


nsec. 


t1 , t2, ta, t4 


Clock pulse width 


24 


250 


nsec. 


tcy 


Clock cycle time 


125 


1000 


nsec. 


ted 


Clock to signal delay time 




55 


nsec. 


tdh 


Clock to signal hold time 


15 




nsec. 


ten 


Clock to signal output enable time 


15 




nsec. 


tdf 


Clock to signal data float time 




40 


nsec. 


tdc 


Signal to clock setup time 


5 




nsec. 


tie 


Initialization period 


20 


100 


tcy 



All AC parameters are guaranteed over the following conditions: 

VSS2..VSS0 = 0 Volts 
VCC2..VCC0 = 5.0 Volts ±10% 

100 pIcoFarad external load capacitor on all output pins 



iAPX 43204 Capacitance Data 

Conditions: Ta = 25°C 

VCC = 5.0 Volts, GND = 0.0 Volts 

f(test) = 1.0 MHz 

Inputs held at 0.0 Volts 

All outputs In high Impedance state 

All input/output pins are classified as outputs 



Symbol 


Description 


Max 


Units 


Cin 


Input Capacitance 


6 


PF 


Cout 


Output Capacitance 


12 


PF 
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WAVEFORMS 



iAPX 43204 Clock Input Specification 



CLKA 



CLKB 



iAPX 43204 Initialization Timing 



toe 



toe 



1 



J 
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WAVEFORMS (Continued) 



iAPX 43204 Input Timing Specification 



MERL, BERL1 



MMAH,MACC(15-0) 
MBCHT, BCHK, 
CTL(2-0),CHK(1-0) 



RQ,CONT,NREQ, 
NREQOUT.RQOUT 



PRO 
ACD (15-0) 



INVALID 



/ 

\ 


DATA^ 







toe *0H 



I 





\ / 






INVAUD 








DATA yjy INVALID 


. — A 


toe i toH 1 



I 



Y" 



toe toH 



INVALID 
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WAVEFORMS (Continued) 



iAPX 43204 Output Timing Specification 



J 


\ 1 






3-STATEOR PREVIOUS 
DATA 












tEN 



J 



MERLOUT 
BE RLOUT 
MMAH 
MEOUT 



I 



DATA 



Y 
A 



tcD 



toH 




CLKB 



ACL (15-0), 
ICSOUT, CLRPUOUT 



CHK(I-O), CTL(2-0), 
MACD(15-0),BCHK 



3-STATE OR 
PREVIOUS DATA 



3-STATEOR 
PREVIOUS DATA 



DATA 



I 



toH 



Y 
A 



AGO 
DATA 



Y 

A 
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ABSOLUTE MAXIMUM RATINGS* 

Ambient Temperature Range 0°C to 70°C 

Storage Temperature - SS^'C to + 1 50°C 

Voltage on Any Pin with 

Respect to Ground - 1 .OV to + 7V 

Power Dissipation 2.5 Watt 



*NOTICE: Stresses above those listed under "Abso- 
lute Maximum Ratings ' ' may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions above those indicated in the oper- 
ational sections of this specification is not Implied. 
Exposure to absolute maximum rating conditions 
for extended periods may affect device reliability. 



IAPX 43205 DC Characteristics 



Symbol 


Description 


Min 


Max 


Units 


Vile 


Clock input low voltage 


-0.5 


+0.8 


V. 


Vihc 


Clock input high voltage 


3.2 


Vcc +0.5 


V. 


Vil 


Input low voltage 


-0.5 


+0.8 


V. 


Vih 


Input high voltage 


2.0 


VCC +0.5 


V. 


Vol 


Output low voltage 




0.45 


V. 


Voh 


Output high voltage 
SLAD19..0 
Other outputs 


2.6 
2.4 


VCC 
VCC 


V. 
V. 


Hi 


Input leakage current (measured at Vin=VCC Volts) 




±10 


jiiA. 


Ho 


Output leakage current (measured at 0.45 Volts < Vout 
< VCC Volts) 




±10 


fiA. 


loh 


Output high current (measured at Vout=2.6 V.) 


-2 




mA. 


lol 


Output low current (measured at Vout=0.45 V.) 


4 




mA. 


Ice 


Power supply current (sum of VCCO, VCC1 , VCC2) 




450 


mA. 



All DC parameters are guaranteed over the following conditions: 

VSS2..VSS0 = 0 Volts 
VCC2..VCC0 = 5.0 Volts ±10% 

The absolute value of the differential DC voltage between any of the VCC pins (VCC2..VCC0) must be less than 0.1 
Volts. This is normally guaranteed by connecting the three VCC pins to the same printed circuit power trace. 
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iAPX 43205 AC Characteristics 

Ambient temperature range of 0"C to 70°C 



Symbol 


Description 


8 MHz 


Unit 


Min 


Max 


tr, tf 


Clock risG and fall timss 




10 


nsec. 


t1 , t2, tS, t4 


Clock pulse width 


24 


250 


nsec. 


tcv 


Clock cycle time 


125 


1000 


nsec. 


ted 


Clock to signal delay time 




55 


nsec. 


tdh 


Clock to signal hold time 


15 




nsec. 


ten 


Clock to signal output enable time 


15 




nsec. 


tdf 


Clock to signal data float time 




40 


nsec. 


tdc 


Signal to clock setup time 


15 




nsec. 


tmc 


MACD input setup time 


24 




nsec. 


tie 


Initialization period 


40 


100 


tcy 



All AC parameters are guaranteed over the following conditions: 

VSS2..VSS0 = 0 Volts 
VCC2..VCC0 = 5.0 Volts ±10% 

100 picoFarad external load capacitor on all output pins 



IAPX 43205 Capacitance Data 

Conditions: Ta = 25°C 

VCC = 5.0 Volts, GND = 0.0 Volts 

f(test) = 1.0 MHz 

Inputs held at 0.0 Volts 

All outputs in high impedance state 

All input/output pins are classified as outputs 



Symbol 


Description 


Max 


Units 


Cin 


Input Capacitance 


6 


PF 


Cout 


Output Capacitance 


12 


PF 
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Clock Input Timing Specification 



CLKB 



/ 



Initialization Timing Specification 



"V. 
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WAVEFORMS (Continued) 



Input Timing Specification 



BERL1,BERL2, 
BCHKIN/M, ARCHK, 
MBOUT 



RQ.CONT, 



DATA X INVALID 



INVALID 



Memory Bus Input Timing Specification 



BERL1,BERL2, 
BCHKIN/M, ABCHK, 
MBOUT 



RQ, CONT, 



MACK (15-0), 
CTL (2-0) 
CHK(1-0) 



INVALID 



X 



idh 



INVALID 



DATA X INVALID 



INVALID 



28 



AFN-210963 



iAPX 43204, 43205 



lF[^[i!L[]!M]D[K]M 



WAVEFORMS (Continued) 



Memory Bus Output Timing Specification 



CLKA 



MACD (15-0) 
CTL (2-0) 

CHK(I-O) 



BCHK 



BERLOUT, 
MBOUT, 
BUSSEL 



DATA 



DATA 

-if— 



DATA 



DATA 



1 



DATA 



/ 
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WAVEFORMS (Continued) 



Storage Array Bus Output Timing Specification 



/ 



SLAO (19-0) 



RA S.WE . 

DEIN, 
REFRESH 









DATA 


) 








DATA 


) 






ted 



DATA 



DATA 



X 



DATA 



Storage Array Bus Input Timing Specification 



CLKA 



SLAD(19-0) 







^DATA 


\ 
/ 








'tdh 
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PACKAGE 

The 43204 and 43205 are packaged in 68-pin, lead- 
less JEDEC type A hermetic chip carriers. Figure 13 
illustrates the package, and Figures 9 and 1 1 show 
the pinouts. 



.050 
(1.27) 



JUUUUUUUUUUUUUUUUUC 



Z] 



.800 
(20.32) 




^nnnnnnnnnnnnnnnnn^ 



.960 
' (24.38) 



.960 
(24.38) 



PIN NO. 1 MARK 



.094 
(2.39) 



.066 
(1-68) 



.130 
(3.30) 



Figure 13. 43204 and 43205 JEDEC Type A Package 
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ADDITIONAL INFORMATION 

More information about the interconnect system is 

available in : 

• iAPX 43204/43205 Electrical Specification (Order 
Number 172867) 

• iAPX 432 Interconnect Architecture Reference 
Manual {Order Number 172487) 

• Chapter 18: A Design IVIethodology for High Reli- 
ability Systems: The Intel 432, The Theory and 
Practice of Reliable System Design, Sieworik and 
Swartz, Digital Press, 1982. 



For more information about overall IAPX 432 system 
operation, refer to: 

• General Data Processor Architecture Reference 
(Order Number 171860) 

• iAPX 432 Interface Processor Architecture Refer- 
ence Manual (Order Number 171863) 

For more information about iAPX 432 processor 
components that utilize the interconnect system, 
refer to: 

• iAPX 43201/43202 General Data Processor Data 
Sheet (Order Number 590125) 

• IAPX 43203 Interface Processor Data Sheet 
(Order Number 590130) 
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